My domain is: wolkje.duckdns.org
I ran this command:
certbot certonly --nginx -v -d wolkje.duckdns.org --dry-run --key-type rsa
It produced this output:
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator nginx, Installer nginx
/snap/certbot/4182/lib/python3.12/site-packages/certbot/ocsp.py:238: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to this_update_utc.
if not response_ocsp.this_update:
/snap/certbot/4182/lib/python3.12/site-packages/certbot/ocsp.py:240: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to this_update_utc.
if response_ocsp.this_update > now + timedelta(minutes=5):
/snap/certbot/4182/lib/python3.12/site-packages/certbot/ocsp.py:242: CryptographyDeprecationWarning: Properties that return a naïve datetime object have been deprecated. Please switch to next_update_utc.
if response_ocsp.next_update and response_ocsp.next_update < now - timedelta(minutes=5):
Certificate is due for renewal, auto-renewing...
Simulating renewal of an existing certificate for wolkje.duckdns.org
Performing the following challenges:
http-01 challenge for wolkje.duckdns.org
Waiting for verification...
Challenge failed for domain wolkje.duckdns.org
http-01 challenge for wolkje.duckdns.org
Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: wolkje.duckdns.org
Type: dns
Detail: DNS problem: server failure at resolver looking up A for wolkje.duckdns.org; DNS problem: server failure at resolver looking up AAAA for wolkje.duckdns.org
My web server is (include version): nginx 1.22.1-9
The operating system my web server runs on is (include version): Debian 12
My hosting provider, if applicable, is: (not applicable)
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): 3.0.0
I suspect this is an issue with duckdns, but I'm not sure? I also get error messages here: wolkje.duckdns.org | DNSViz (I'm not sure what they mean exactly.) Is there a way I can solve the issue on my end? Thanks!
(I've closed the ports on my firewall for now.)